Alloc Init's Shielded Bitcoin Would Hide Amounts Without a Soft Fork

Alloc Init researchers Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin proposed Shielded Bitcoin, a privacy metaprotocol on the Bitcoin base layer, which Bitcoin Magazine reported on September 24, 2026. Shielded Bitcoin would conceal transaction amounts, senders, receivers, and links to previously spent funds using encrypted notes and zero-knowledge proofs, without requiring operators, custodians, soft forks, or other changes to Bitcoin consensus.

How Shielded Bitcoin Would Work

Under the proposal, users post encrypted notes and zero-knowledge proofs, and independent indexers verify them. Anyone running an indexer can verify the proofs, so no single operator decides which shielded transfers count.

Recovering funds does not depend on a third party. Bitcoin Magazine quoted the design:

"There is no need for a service provider, coordinator, or any off-chain state to recover funds ... all you need is your node/indexer and your keys."

With no service provider, coordinator, or off-chain state in the recovery path, only private spending keys control funds in Shielded Bitcoin.

Alloc Init aims to solve Bitcoin's lack of financial privacy, where amounts, transaction history, and counterparties are visible, without introducing trusted intermediaries, interactivity, liveness dependencies, or liquidity requirements.

What Is Still Open

Moving bitcoin into and out of the shielded pool is not yet specified. A still-unreleased companion paper covers peg-in and peg-out via PIPEs, and Bitcoin Magazine reported that work on that paper is ongoing and it should be released in the near future.

Open questions include the new shielded pool's tiny early anonymity set, fee-payment linkage, and how trusted the setup would be. Developer Vadim Zavodil is skeptical about the early anonymity set because a new shielded pool would start without the anonymity set Zcash has accumulated, Cointelegraph reported.

Pierre-Luc Dallaire-Demers said the construction is "not quantum resistant at all." Zerocash co-author Eli Ben-Sasson was broadly supportive of the direction, though he said he had not yet read the paper.

Why It Matters

Bitcoin leaves amounts, transaction history, and counterparties visible, and Shielded Bitcoin would conceal amounts, senders, and receivers with encrypted notes and zero-knowledge proofs without requiring a soft fork. Because no soft fork or change to Bitcoin consensus is required, base-layer privacy becomes something users could opt into without waiting on protocol governance. The open questions are real, since a new shielded pool starts with a tiny early anonymity set and fee-payment linkage and setup trust remain unresolved. Because only private spending keys control funds, Shielded Bitcoin keeps full self-custody while adding privacy, and in our view that pairing of custody with verification by anyone running an indexer is the right direction for sovereignty, pending the unreleased PIPEs peg paper.